$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS202782.roa File: AS202782.roa (raw, json) Hash identifier: h8H1b8NFcZrhq7whYU+qBFZlUcIaSLqZqgnQ4k8tI8M= Subject key identifier: F8:65:2A:C6:C4:B5:D2:0D:3F:6C:3D:CE:4B:28:FB:84:68:89:DD:8C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 063258467088CDA5C817BF65694B23C87AFA9748 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS202782.roa Signing time: Tue 21 Jul 2026 13:32:32 +0000 ROA not before: Tue 21 Jul 2026 13:27:32 +0000 ROA not after: Tue 20 Jul 2027 13:32:32 +0000 asID: 202782 IP address blocks: 2406:840:eff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:32:58:46:70:88:cd:a5:c8:17:bf:65:69:4b:23:c8:7a:fa:97:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:32 2026 GMT Not After : Jul 20 13:32:32 2027 GMT Subject: CN=F8652AC6C4B5D20D3F6C3DCE4B28FB846889DD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:75:28:2f:87:1c:ab:e2:fe:42:d6:0a:a1: 69:5d:cd:ba:d3:47:dd:56:17:7c:e2:c9:f0:95:43: 4e:8a:b4:ee:95:a3:a5:91:e3:d1:90:93:15:69:8c: 52:eb:f9:5b:51:db:92:13:55:e1:23:35:f1:26:a7: d1:be:a0:54:bd:ee:fe:79:ee:00:00:78:e7:8e:cb: cc:a2:a6:bf:19:8b:c7:3a:f0:39:4e:42:cf:e9:67: 69:b0:41:1c:7f:a3:2f:27:b7:3b:b1:69:b8:a0:e0: b5:c5:47:8e:32:34:d9:5f:af:bc:de:ec:ad:ea:4d: 8d:43:5b:1a:fe:9f:80:8e:df:11:b0:b6:e3:af:d8: e3:a6:28:7b:af:ba:bb:64:50:57:de:46:74:9e:42: 2b:c6:38:db:28:2d:a8:91:a0:60:cd:0a:13:a1:94: 03:fb:7b:fa:e6:10:2c:f0:d1:21:71:1a:75:e1:f5: 73:90:0e:84:c1:66:08:80:bd:fd:a3:fe:bf:f6:8c: a6:c2:5c:69:ba:03:cd:3e:67:fb:ba:48:d1:f9:cd: ad:48:7c:64:e2:e0:7a:f7:de:d6:22:bc:7b:ee:32: 80:51:60:61:d4:4e:7c:32:49:fc:16:fe:df:86:91: bf:b1:cf:14:e4:60:b4:a5:9b:2f:6e:0f:43:9e:55: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:2A:C6:C4:B5:D2:0D:3F:6C:3D:CE:4B:28:FB:84:68:89:DD:8C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS202782.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:eff0::/44 Signature Algorithm: sha256WithRSAEncryption 32:32:7b:9f:63:f1:e3:6d:70:1b:e1:a1:5b:04:dc:b3:db:c6: c3:a3:49:2d:bb:4d:24:3f:9f:5c:7c:8f:f5:41:30:13:f8:61: 5c:f5:50:10:63:6b:82:c4:f2:21:24:38:34:80:e0:80:dd:f3: fb:08:eb:f9:8c:58:db:24:a7:a3:04:38:e9:9a:29:e8:0e:a0: ca:bc:de:84:3d:81:64:fa:e5:20:9c:e6:af:8d:2c:07:a7:26: d3:b8:da:d1:b8:4e:ef:33:f1:47:56:f4:7f:d1:29:b1:02:61: b6:c1:31:51:ba:48:09:26:42:69:8b:6b:1e:16:f2:d7:1c:54: 0a:ff:0c:81:3a:1d:90:c0:cf:a6:8d:0d:33:f3:c9:6d:e5:ea: 67:cc:c5:87:47:89:c4:0b:5d:42:9d:f2:86:02:f5:42:32:28: f7:c4:cd:b2:44:85:8d:9b:99:5d:c6:1a:94:f1:9b:c5:eb:cc: 00:8d:5a:f9:d9:58:c9:63:20:dd:90:0c:23:71:72:85:80:70: 38:9a:c3:aa:38:c1:6f:ce:c5:e9:9f:5d:cb:04:52:84:0a:54: 49:11:b8:eb:d6:6f:a8:30:c4:66:b4:ac:bb:22:8a:8d:3e:fa: 03:b6:f3:b8:d9:d0:33:dd:06:a2:73:e7:6f:5e:b7:11:2b:9f: f0:7e:d1:4c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUBjJYRnCIzaXIF79laUsjyHr6l0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMloX DTI3MDcyMDEzMzIzMlowMzExMC8GA1UEAxMoRjg2NTJBQzZDNEI1RDIwRDNGNkMz RENFNEIyOEZCODQ2ODg5REQ4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKj8dSgvhxyr4v5C1gqhaV3NutNH3VYXfOLJ8JVDToq07pWjpZHj0ZCTFWmM Uuv5W1HbkhNV4SM18San0b6gVL3u/nnuAAB4547LzKKmvxmLxzrwOU5Cz+lnabBB HH+jLye3O7FpuKDgtcVHjjI02V+vvN7srepNjUNbGv6fgI7fEbC246/Y46Yoe6+6 u2RQV95GdJ5CK8Y42ygtqJGgYM0KE6GUA/t7+uYQLPDRIXEadeH1c5AOhMFmCIC9 /aP+v/aMpsJcaboDzT5n+7pI0fnNrUh8ZOLgevfe1iK8e+4ygFFgYdROfDJJ/Bb+ 34aRv7HPFORgtKWbL24PQ55VRwUCAwEAAaOCAicwggIjMB0GA1UdDgQWBBT4ZSrG xLXSDT9sPc5LKPuEaIndjDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwMjc4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDv8DANBgkqhkiG9w0BAQsFAAOCAQEAMjJ7n2Px421wG+GhWwTcs9vGw6NJLbtN JD+fXHyP9UEwE/hhXPVQEGNrgsTyISQ4NIDggN3z+wjr+YxY2ySnowQ46Zop6A6g yrzehD2BZPrlIJzmr40sB6cm07ja0bhO7zPxR1b0f9EpsQJhtsExUbpICSZCaYtr Hhby1xxUCv8MgTodkMDPpo0NM/PJbeXqZ8zFh0eJxAtdQp3yhgL1QjIo98TNskSF jZuZXcYalPGbxevMAI1a+dlYyWMg3ZAMI3FyhYBwOJrDqjjBb87F6Z9dywRShApU SRG469ZvqDDEZrSsuyKKjT76A7bzuNnQM90GonPnb163ESuf8H7RTA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:52 2026 by rpki-client